commit d5a1da46d29db77e80e6d4860ac2d016a618d090
parent ac71a57ca7682e9bc46f85c6c2deb4ec7e9581c7
Author: Martin Schanzenbach <schanzen@gnunet.org>
Date: Tue, 18 Jun 2024 16:40:14 +0200
sectioning
Diffstat:
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/draft-gnunet-communicators.xml b/draft-gnunet-communicators.xml
@@ -202,6 +202,8 @@
</section>
<section anchor="primitives" numbered="true" toc="default">
<name>General purpose primitives</name>
+ <section anchor="key_derivation" numbered="true" toc="default">
+ <name>Key derivation</name>
<t>
We use a hash-based key derivation function (HKDF) as defined in
<xref target="RFC5869" />, using SHA-256 <xref target="RFC6234"/> for the extraction
@@ -226,6 +228,9 @@ KDF(A,Z):
MSK := HKDF-Expand (PRK_h, "gnunet-ed25519-x25519-ecdh", (512) / 8)
return MSK
]]></artwork>
+ </section>
+ <section anchor="elligator_kem" numbered="true" toc="default">
+ <name>Elligator KEM</name>
<t>
GNUnet utilizes Elligator for the encoding and decoding of the ephemeral public keys
described in Section 5 of <xref target="BHKL13"/>.
@@ -241,7 +246,7 @@ KDF(A,Z):
Z := X25519(EPH_SK, EdToCurve25519(REC_ID)) = X25519(REC_SK, EPH_PUB)
]]></artwork>
<t>
- We can then define the UDP communicator’s key exchange for the first message as a KEM:
+ We can then define the KEM:
</t>
<artwork anchor="encaps" name="" type="" align="left" alt=""><![CDATA[
EncapsElligator(REC_ID):
@@ -270,6 +275,7 @@ Decaps(REC_SK, REPR):
More details about the construction of the representative and Elligator's
usage can be found in <xref target="Elligator"/>.
</t>
+ </section>
</section>
<section anchor="udp_comm" numbered="true" toc="default">
<name>UDP communicator</name>